CVE-2023-33280

Name of the Vulnerable Software and Affected Versions Store Commander scquickaccounting module for PrestaShop versions through 3.7.3

Description The issue allows multiple sensitive SQL calls to be executed with a trivial HTTP request, which can be exploited to forge a blind SQL injection.

Recommendations For versions through 3.7.3, consider restricting access to sensitive SQL calls until a patch is available. As a temporary workaround, avoid using the scquickaccounting module until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.